Privacy Policy

Privacy Policy

Last Updated: June 26, 2025

We appreciate your interest in our store. The protection of your privacy and data is important to us. Below you will find information about how we collect, process, and use your personal data in compliance with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data Controller

Set Express GmbH

Raiffeisenstr. 10
61191 Rosbach
Germany
Phone: +49 6007 800 900 0
Email: via contact form

Managing Director:
Marco Lohnes
Commercial Register: Friedberg, HRB 10016
VAT ID No.: DE356360991

Responsible according to § 55 RStV:
Marco Lohnes
61191 Rosbach

2. Personal Data We Collect

We collect and store data when you:

  • Visit our website

  • Open a customer account

  • Place an order

  • Subscribe to our newsletter

  • Interact with forms, quotes, or checkout

Types of data may include:

  • Full name and address

  • Email address and telephone number

  • Payment and billing details

  • VAT ID (for B2B transactions)

  • IP address and browser information

  • User behavior on our website (e.g., clicks, pages viewed)

3. Legal Basis for Processing

We process your data based on:

  • Contractual necessity – for fulfilling orders and services

  • Consent – for marketing, newsletter, cookies, and analytics

  • Legal obligations – e.g., tax or invoicing

  • Legitimate interest – e.g., for fraud detection or site analytics

4. Use of Your Data

We use your data to:

  • Fulfill orders and manage accounts

  • Validate VAT ID and apply proper tax rates (OSS compliant)

  • Communicate with you (order confirmation, support, invoices)

  • Analyze website performance and customer behavior

  • Send newsletters and marketing, where consent has been given

5. Data Sharing

Your data may be shared with:

  • Payment providers (e.g., Stripe, PayPal)

  • Shipping/logistics partners

  • Tax and invoice management tools

  • Marketing platforms (HubSpot, Facebook Ads)

  • Analytics providers (Google Analytics, Hotjar)

All third-party providers are GDPR-compliant and process data on our behalf.

6. VAT ID Validation & OSS Compliance

We use Exemptify to validate VAT IDs and apply destination-based VAT rates across the EU. This ensures proper OSS compliance by:

  • Charging the correct VAT rate based on customer’s country

  • Allowing exempt purchases for verified B2B customers outside the base country

  • Displaying prices excluding VAT (net), with VAT calculated precisely at checkout

7. Cookies & Consent Management

We use the Pandectes GDPR Compliance app to manage cookie consent in accordance with the EU Cookie Law. This includes:

  • Blocking all non-essential cookies before user consent

  • Providing granular cookie category controls

  • Displaying a persistent cookie banner for EU users

  • Logging consent for audit purposes

For more, see our Cookie Declaration.

8. Analytics & Tracking Tools

We use the following tools:

  • Google Analytics (with IP anonymization)

  • Facebook Pixel (including Custom Audiences)

  • Hotjar (heatmaps, session recordings)

  • HubSpot (CRM, email marketing)

You may opt-out of tracking by using the links provided in our Cookie Declaration.

9. Newsletter & Email Marketing

You can subscribe to our newsletter by providing explicit consent. You may unsubscribe at any time via a link in the email or by contacting us.

If we’ve received your email through a purchase and you haven’t opted out, we may send promotional content related to similar products (Article 6(1)(f) GDPR).

10. Review Reminders via Trusted Shops

With your explicit consent, we may share your email with Trusted Shops GmbH to send a review reminder for your recent purchase.

11. Your Rights Under GDPR

You have the right to:

  • Access your data

  • Request correction or deletion

  • Withdraw consent

  • Object to processing

  • Lodge a complaint with your local data protection authority

Contact us at Marco@prisma.film to exercise these rights.

12. Data Security & Retention

Your data is protected using industry-standard encryption and security protocols. We store data only as long as legally required or necessary for our services.

13. International Data Transfers

Where we use service providers outside the EU (e.g., Shopify, HubSpot), data transfers occur under appropriate safeguards such as Standard Contractual Clauses or EU-US Privacy Shield frameworks.

14. Updates to This Policy

We may update this policy occasionally. Changes will be posted on this page, with the updated date above.

 

Newsletter

A short sentence describing what someone will receive by subscribing